Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          zUJ0QBjO8TrxUWsmy3B0EXkNdh1Llp9VvrFrCFv4pNc=
Subject key identifier:   E7:12:C1:BB:33:18:92:E6:19:77:6B:12:3B:F7:23:DF:7C:79:57:C4
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       01962E61E96258B1CF02AA1239B096CA0EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
                          2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: 6hCdCKGpXXg7xpZLLUBXzEX5Tv5LfQtJgxRKb33qjGE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:62:58:b1:cf:02:aa:12:39:b0:96:ca:0e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=e712c1bb331892e619776b123bf723df7c7957c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:ac:3e:88:a7:34:cf:d4:e3:6b:73:2c:29:
                    a5:60:85:12:76:2d:73:85:9a:d7:3e:b3:59:f9:be:
                    d8:92:ce:71:4a:03:cf:c8:4e:2a:79:dd:c1:5c:b3:
                    d4:81:b9:d8:20:e8:08:a6:4f:5f:6d:0a:88:e7:07:
                    5a:1a:50:32:66:c2:6e:e0:16:ad:d5:bc:17:84:e6:
                    b8:d0:2c:c5:7c:65:90:60:39:91:e9:1c:4f:c9:cd:
                    07:2e:49:d2:43:08:a8:92:60:fd:2c:2a:33:ae:b8:
                    d1:86:8b:10:0c:48:10:25:d3:91:1e:17:70:75:93:
                    f8:06:08:1b:98:c7:5a:46:f3:4e:5c:f7:f4:8a:85:
                    08:26:a6:c6:53:86:10:2a:be:ee:23:1c:b4:ee:e8:
                    0e:e7:71:6c:f3:1f:95:b0:bb:33:83:c6:ee:26:6a:
                    9f:d8:96:42:92:a3:2a:d7:c3:8a:38:a3:f3:44:22:
                    48:a2:4e:bb:74:42:0a:64:76:e5:b8:b2:76:e4:d8:
                    f4:70:d1:f0:e5:07:4d:da:4c:cc:64:31:51:93:bc:
                    9f:6a:b2:37:58:81:0b:81:6a:9f:e0:88:f1:67:6f:
                    03:f2:da:c3:d1:72:29:38:d2:8a:db:c0:45:66:2c:
                    65:c4:71:92:dc:1d:58:8b:5a:83:57:18:76:0e:2a:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:12:C1:BB:33:18:92:E6:19:77:6B:12:3B:F7:23:DF:7C:79:57:C4
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:94:a7:53:9a:f8:71:82:ca:e0:b7:97:7f:1f:10:b4:ef:06:
         5e:74:b7:28:23:2b:b4:c8:ab:83:15:d5:a1:cf:02:4b:a9:bd:
         74:79:85:df:47:8d:27:7c:d0:39:bc:b9:1d:b0:42:bf:51:7a:
         e4:bf:5c:6b:f1:fe:75:62:40:18:14:a4:f6:51:cf:46:40:70:
         49:4e:93:94:d2:42:26:0f:33:c5:41:8b:23:1a:01:35:0a:d4:
         d1:5b:15:34:76:48:8f:91:3d:0c:32:97:a3:cd:91:36:80:4f:
         62:16:25:35:81:a9:32:03:10:14:02:c3:03:cb:fd:d2:97:fb:
         c5:5c:c2:51:a9:00:57:e3:a2:80:f1:ed:db:a0:bd:98:1a:db:
         30:ad:88:d0:56:44:4c:ca:7e:80:a5:df:0c:0d:02:af:78:4a:
         ef:77:97:2a:5c:48:9c:99:87:47:6b:e7:f1:58:c7:41:46:c0:
         01:63:d1:8d:e2:eb:72:7f:25:44:91:c9:9b:50:e1:2d:e3:50:
         ff:43:4c:4f:b1:9d:77:17:f7:8d:b0:cf:3b:7c:3c:13:03:3e:
         f0:d7:c8:9a:93:b6:d4:04:38:34:aa:e1:d7:71:da:15:0d:fb:
         a1:29:ce:89:ed:43:2a:a9:18:57:57:9b:21:74:f2:d9:0c:3f:
         82:bb:bd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeliWLHPAqoSObCWyg7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGRhMGEwMDk1MzAzYTkxZjM4ZTQzYWI0ZDM3YjYxOWMz
YmVhMWQwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhlNzEyYzFiYjMzMTg5MmU2MTk3NzZiMTIzYmY3MjNkZjdjNzk1N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCOsPoinNM/U42tzLCmlYIUSdi1z
hZrXPrNZ+b7Yks5xSgPPyE4qed3BXLPUgbnYIOgIpk9fbQqI5wdaGlAyZsJu4Bat
1bwXhOa40CzFfGWQYDmR6RxPyc0HLknSQwiokmD9LCozrrjRhosQDEgQJdORHhdw
dZP4BggbmMdaRvNOXPf0ioUIJqbGU4YQKr7uIxy07ugO53Fs8x+VsLszg8buJmqf
2JZCkqMq18OKOKPzRCJIok67dEIKZHbluLJ25Nj0cNHw5QdN2kzMZDFRk7yfarI3
WIELgWqf4IjxZ28D8trD0XIpONKK28BFZixlxHGS3B1Yi1qDVxh2DioROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcSwbszGJLmGXdrEjv3I998eVfEMB8GA1UdIwQY
MBaAFDndoKAJUwOpHzjkOrTTe2GcO+odMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMt
N2NhOWI4ZTkxYWM3LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTc4NzYtZGE3Mi00MGJjLThkNWMtN2NhOWI4ZTkxYWM3
LzEvT2QyZ29BbFRBNmtmT09RNnROTjdZWnc3NmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZSnU5r4
cYLK4LeXfx8QtO8GXnS3KCMrtMirgxXVoc8CS6m9dHmF30eNJ3zQOby5HbBCv1F6
5L9ca/H+dWJAGBSk9lHPRkBwSU6TlNJCJg8zxUGLIxoBNQrU0VsVNHZIj5E9DDKX
o82RNoBPYhYlNYGpMgMQFALDA8v90pf7xVzCUakAV+OigPHt26C9mBrbMK2I0FZE
TMp+gKXfDA0Cr3hK73eXKlxInJmHR2vn8VjHQUbAAWPRjeLrcn8lRJHJm1DhLeNQ
/0NMT7Gddxf3jbDPO3w8EwM+8NfImpO21AQ4NKrh13HaFQ37oSnOie1DKqkYV1eb
IXTy2Qw/gru9SA==
-----END CERTIFICATE-----